Описание
In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 6.0.5-1 |
| cosmic | not-affected | 6.0.5-1 |
| devel | not-affected | 6.0.5-1 |
| disco | not-affected | 6.0.5-1 |
| esm-apps-legacy/xenial | not-affected | 5.0.7-1 |
| esm-apps/bionic | not-affected | 6.0.5-1 |
| esm-apps/xenial | not-affected | 5.0.7-1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| precise/esm | DNE |
Показывать по
EPSS
4 Medium
CVSS2
8.8 High
CVSS3
Связанные уязвимости
In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password.
In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x throu ...
In the Agent Frontend in Open Ticket Request System (OTRS) 3.3.x through 3.3.18, with a crafted URL it is possible to gain information like database user and password.
ALT-PU-2015-1405: package `otrs` update to version 4.0.7-alt1
EPSS
4 Medium
CVSS2
8.8 High
CVSS3